2,846
edits
Changes
no edit summary
The Switch uses the NRR file format to verify [[NRO]] at load time. These files contain hashes of each NRO that is allowed to be loaded by the program. An NRO's SHA-256 hash must match any of the hashes in the hash table. NRRs are signed with RSASSA-PSS-2048/SHA-256.
The Switch uses the NRR file format to verify [[NRO]] at load time. These files contain hashes of each NRO that is allowed to be loaded by the program. An NRO's SHA-256 hash must match any of the hashes in the hash table. NRRs are signed with RSASSA-PSS-2048/SHA-256.
= NrrHeader =
This is "nn::ro::detail::NrrHeader".
{| class="wikitable" border="1"
{| class="wikitable" border="1"
| 0x0
| 0x0
| 0x4
| 0x4
| Magic ("NRR0")
| Signature ("NRR0")
|-
|-
| 0x4
| 0x4
| 0x4
| 0x1
| [9.0.0+] SignatureKeyGeneration
| [9.0.0+] SignKeyGeneration
|-
|-
| 0x8
| 0x5
| 0x8
| 0xB
| Reserved
| Reserved
|-
|-
| 0x10
| 0x10
| 0x220
| 0x220
| [[#Certification|Certification]]
| [[#NrrCertification|Certification]]
|-
|-
| 0x230
| 0x230
| 0x100
| 0x100
| Signature (verifiable with the certification key, over the rest of the file)
| Sign (signature verifiable with the certification key, over the rest of the file)
|-
|-
| 0x330
| 0x330
| 0x8
| 0x8
| ApplicationId
| ProgramId
|-
|-
| 0x338
| 0x338
| 0x340
| 0x340
| 0x4
| 0x4
| HashOffset (always 0x350)
| HashListOffsetAddress (always 0x350)
|-
|-
| 0x344
| 0x344
|}
|}
= Certification =
= NrrCertification =
This is "nn::ro::detail::NrrCertification".
{| class="wikitable" border="1"
{| class="wikitable" border="1"
|-
|-
| 0x0
| 0x0
| 0x8
| 0x8
| ApplicationIdMask
| ProgramIdMask
|-
|-
| 0x8
| 0x8
| 0x8
| 0x8
| ApplicationIdPattern
| ProgramIdPattern
|-
|-
| 0x10
| 0x10
| 0x120
| 0x120
| 0x100
| 0x100
| Signature (over the above contents)
| Sign (signature over the above contents)
|}
|}